This message was deleted.

Maybe this is a dumb question, but if this wasn't an issue with the MPX then why is it the VPX? Hypervisors dont have access to the DMZ network or something?

Its not dumb Neal, thanks for replying. The DMZ in the hypervisor has no connection to the LAN and the hosting team arent willing to redesign it to help me as apparently it is too much work. So over time i have found all of these things out. Therefore i have said i dont know how to make it work without being a like for like MPX to MPX. So i wondered if anyone here could help me out of a bind because if the F5 is doing it with SNAT and a feature called AutoMap which seems to be some kind of rewrite then id hope the ADC VPX can do it to but i am just unsure.

is it a hypervisor specifically for DMZ with only access to DMZ vlans or ? That part is a bit unclear.

i believe this is what the F5 is doing but is it possible for the ADC to do it for Ctx GW with MFA for Remote Access? https://support.f5.com/csp/article/K7820#intelligent:~:text=SNAT%20pools.-,Automap%20SNAT,-Of%20the%20available

You can RNAT on a netscaler based on an ACL, that would enable you to communicate with a "non-routed" vlan, but you'd still need actual access to that vlan, which from what I understood just isn't there?

i have never used RNAT to be honest but any snip other than one from the DMZ wont work because if it uses that SNIP as soon as it hits the DMZ DFG traffic is dropped. I can only send traffic to the DMZ DFG no where else. So LAN traffic has to leave the ADC as a DMZ address 192.168.x.x in disguise to reach the LAN segment. I had this example from the hosting team of how they do it on their appliance as i am being told the firewall will only accept DMZ traffic(192.168.x.x) but i guess i have been struggling as its not my solution or design. But what i dont know is if this can be done on a gw vip with MFA ? Their F5 is just doing load balancing from what i can tell. F5 with a single i/f in the DMZ on 192.168.x.x